{"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"}
{"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"}
{"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"}
{"level":"error","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:44:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:44:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"}
{"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"}
{"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"}
{"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"}
{"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"}
{"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"}
{"level":"info","ts":"2026-07-02T19:45:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:45:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"}
{"level":"error","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"}
{"level":"debug","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"}
{"level":"info","ts":"2026-07-02T19:45:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e"}
{"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47410","PortSpecifier":{"PortValue":47410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f4c826a-4ae9-4173-a176-13400188ef73","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47410","PortSpecifier":{"PortValue":47410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021520,"nanos":616906657},"http":{"id":"1f4c826a-4ae9-4173-a176-13400188ef73","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f4c826a-4ae9-4173-a176-13400188ef73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39138","PortSpecifier":{"PortValue":39138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39138","PortSpecifier":{"PortValue":39138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021520,"nanos":659854504},"http":{"id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c426e37-e6cb-4e17-8187-646a0b3e5220","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47426","PortSpecifier":{"PortValue":47426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47426","PortSpecifier":{"PortValue":47426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021520,"nanos":706605613},"http":{"id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni\"}"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","subscription":"e2e-rate-iso-a-c2e107","tenant":"e2e-shared-a-4a101a","userId":"ee99b81a-8191-451f-a61d-483409782383","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-c2e107\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2e107"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","selected_subscription":"e2e-rate-iso-a-c2e107","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-c2e107@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62baafcf-40d8-461e-9dda-e5c92b4ce332","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47430","PortSpecifier":{"PortValue":47430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47430","PortSpecifier":{"PortValue":47430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021521,"nanos":771023615},"http":{"id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni"}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni\"}"}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","subscription":"e2e-rate-iso-a-c2e107","tenant":"e2e-shared-a-4a101a","userId":"ee99b81a-8191-451f-a61d-483409782383","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-c2e107\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2e107"}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","selected_subscription":"e2e-rate-iso-a-c2e107","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-c2e107@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca81eff1-1d24-4cdd-9305-7cef5578556e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c95c7526-8392-4fa3-a064-36fd218427c2","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021522,"nanos":806224975},"http":{"id":"c95c7526-8392-4fa3-a064-36fd218427c2","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni"}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5Nvhwi5sVm9X54oB_USco6jd8Er3spezrJSzcuf63QwQNx6433JXkkfWgEni\"}"}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","subscription":"e2e-rate-iso-a-c2e107","tenant":"e2e-shared-a-4a101a","userId":"ee99b81a-8191-451f-a61d-483409782383","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-c2e107\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c2e107"}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ee99b81a-8191-451f-a61d-483409782383","keyName":"e2e-rate-a-c2e107","selected_subscription":"e2e-rate-iso-a-c2e107","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-c2e107@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c2e107","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c95c7526-8392-4fa3-a064-36fd218427c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38778","PortSpecifier":{"PortValue":38778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39f310bb-6643-4187-a9f6-2e7e23e93689","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38778","PortSpecifier":{"PortValue":38778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021533,"nanos":552887825},"http":{"id":"39f310bb-6643-4187-a9f6-2e7e23e93689","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39f310bb-6643-4187-a9f6-2e7e23e93689","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bee1de7c-c613-432e-842b-867aca14b48d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36924","PortSpecifier":{"PortValue":36924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bee1de7c-c613-432e-842b-867aca14b48d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bee1de7c-c613-432e-842b-867aca14b48d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36924","PortSpecifier":{"PortValue":36924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021533,"nanos":593846677},"http":{"id":"bee1de7c-c613-432e-842b-867aca14b48d","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bee1de7c-c613-432e-842b-867aca14b48d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"478a9049-7589-4443-b6b2-6a4e0000802d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"]}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bee1de7c-c613-432e-842b-867aca14b48d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/019e3868b7bb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=0f0454db-c5ce-45da-8d0c-353cff446c8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"478a9049-7589-4443-b6b2-6a4e0000802d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bee1de7c-c613-432e-842b-867aca14b48d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bee1de7c-c613-432e-842b-867aca14b48d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bee1de7c-c613-432e-842b-867aca14b48d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38780","PortSpecifier":{"PortValue":38780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38780","PortSpecifier":{"PortValue":38780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021533,"nanos":633066634},"http":{"id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy\"}"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","subscription":"e2e-rate-iso-a-8a145d","tenant":"e2e-shared-a-4a101a","userId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-8a145d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a145d"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","selected_subscription":"e2e-rate-iso-a-8a145d","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-8a145d@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4be58e63-b4cf-4508-ba2e-ad22635a10be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38784","PortSpecifier":{"PortValue":38784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31c15413-4ffd-4278-ad9d-d238d94044ac","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38784","PortSpecifier":{"PortValue":38784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021534,"nanos":672668278},"http":{"id":"31c15413-4ffd-4278-ad9d-d238d94044ac","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy"}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy\"}"}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","subscription":"e2e-rate-iso-a-8a145d","tenant":"e2e-shared-a-4a101a","userId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-8a145d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a145d"}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","selected_subscription":"e2e-rate-iso-a-8a145d","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-8a145d@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31c15413-4ffd-4278-ad9d-d238d94044ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38788","PortSpecifier":{"PortValue":38788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","method":"POST","path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions","host":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38788","PortSpecifier":{"PortValue":38788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021535,"nanos":709141175},"http":{"id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","method":"POST","headers":{":authority":"e2e-shared-a-4a101a.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ScMFmPCfUizalaVE_CHAoFCHfQgt5f54HgN4Cxv1U8P4BdFGiHgH1pIv76wy\"}"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","subscription":"e2e-rate-iso-a-8a145d","tenant":"e2e-shared-a-4a101a","userId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\",\"requestedSubscription\":\"e2e-rate-iso-a-8a145d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-4a101a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a145d"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04ef27d5-d19f-42f0-8ce0-f3fd883e8f3e","keyName":"e2e-rate-a-8a145d","selected_subscription":"e2e-rate-iso-a-8a145d","selected_subscription_key":"ai-tenant-e2e-shared-a-4a101a/e2e-rate-iso-a-8a145d@ai-tenant-e2e-shared-a-4a101a/rate-test-model-4a101a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4a101a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a145d","namespace":"ai-tenant-e2e-shared-a-4a101a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d6cc136-d4f4-4911-8954-d1d1aa4c32fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36926","PortSpecifier":{"PortValue":36926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","method":"POST","path":"/ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343/v1/completions","host":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36926","PortSpecifier":{"PortValue":36926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021535,"nanos":742398677},"http":{"id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","method":"POST","headers":{":authority":"e2e-shared-b-f80343.apps.903fe912-eccc-49e5-9cfd-019e3868b7bb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Kv0PPNTnRQffUXax_abfiP2w2lWChsdUeo6TMFsEi2GxVqPIgwPyIYk5nNfX"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Kv0PPNTnRQffUXax_abfiP2w2lWChsdUeo6TMFsEi2GxVqPIgwPyIYk5nNfX\"}"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a6838eb5-b242-47f5-b57b-33eee0c6048d","keyName":"e2e-rate-b-8a145d","subscription":"e2e-rate-iso-b-8a145d","tenant":"e2e-shared-b-f80343","userId":"a6838eb5-b242-47f5-b57b-33eee0c6048d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343\",\"requestedSubscription\":\"e2e-rate-iso-b-8a145d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f80343.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f80343","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8a145d","namespace":"ai-tenant-e2e-shared-b-f80343","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8a145d"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a6838eb5-b242-47f5-b57b-33eee0c6048d","keyName":"e2e-rate-b-8a145d","selected_subscription":"e2e-rate-iso-b-8a145d","selected_subscription_key":"ai-tenant-e2e-shared-b-f80343/e2e-rate-iso-b-8a145d@ai-tenant-e2e-shared-b-f80343/rate-test-model-f80343","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f80343","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8a145d","namespace":"ai-tenant-e2e-shared-b-f80343","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:45:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"472f88f0-5ba7-48d4-ad17-dc67f58021e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:45:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b03771bf89dd639ce0e8d328c68d0acb6382aa2dd506f088e6b7074ed2f175b"}
{"level":"info","ts":"2026-07-02T19:45:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6557eaa02ffb136250c4728f9bbf8260a21ea9e970e1a9effe731aac119369a4"}
{"level":"info","ts":"2026-07-02T19:45:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86ed538deed85b129d8cd2dfc48be19c945526271c9f9925e091fa84aaf7488b"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c51b6fb534e76e8ffdf85855402d1cea4bc74f5a41996f3570ad89f47f9064f2"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df8ffd2213c4603ccf705ca65a2fb29d54e57bffc4ead2e5da1d7f2e99e41fb7"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/090147dfd3d623a9ca9bc2940362e070221c18755a3876fff5bc929660bfea82"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f1552cd555c6bbadcd8113b4e751e4216699fa9eb95250845ee557acf1a545e"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e938dfc05324b57a4d55f53c86e24beff02c9b264961e5b378c40ba1fa9f2782"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93ecc94b6311de85f1049ad84683f5df603605cc382d097b0de63c05563a9558"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44ff4044a0a2cbd01f12552e7fa0ccfcb977e77a93613d92fd840a7899fe693d"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac2a8954e7e88f4c0971264edcc2fec0357178441ce067b4b9f7121d3f472252"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54c01054f0816cd1e76ac345670b5e7cb0519d96138bca7409941f8e61cc22a9"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/affc2c0cd4973fbc044e65f04a5e0189778d0969fb893d24baed5bedcd0b4cf0"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef93b9e82af1d5de37dfc31e29a3e497351ad0345605a42708839748b02e907f"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95b3ffe26c28bf9bc03e8fe85a9603803d5d5fdd3e26c6088a0899fe1fe77ddc"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/431142a208505e08c9cb9d7e406cbbffc5a84f5ed26bfe5e7bc7855cf2506e4a"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86ce59e84fa1cb053a2dca6aa424b0adbf331dd71ea8110b9fbcdf5c9df0b1b0"}
{"level":"info","ts":"2026-07-02T19:45:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d38a65992046dff6eaee609994e2f9e3a8c63971c4c223e4e749382d25705ff"}
{"level":"info","ts":"2026-07-02T19:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02e7c778b8d5870bd1fedd83a345b9ae8d600a00f93c694e96ed44deb9c62132"}
{"level":"info","ts":"2026-07-02T19:46:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1328f9e27319dda7e93abfd69def5501849fe8d1b1754f81d835b92efde07201"}